I'm having problems communicating with the licensing server, what should I check?
If you've determined that LicenseControl is blocked by a firewall and/or proxy server (see information below) and that you can't or won't setup the network services to allow LicenseControl to communicate with the licensing server, you'll need to use LicenseControl's manual licensing capability (expand/read the Manual Licensing Detail, below).
There are two notable exceptions to this:
- if the system you're using employs outgoing firewall software that controls network connections based upon the application from which they originate (e.g., "Little Snitch" on OS X or "PCZoneAlarm" on Windows), then you will need to configure your system to allow LicenseControl to communicate
- if your network employs a proxy server that proxies based upon individual applications, then you will need to ensure that the proxy server allows LicenseControl to communicate
Thus, if you can use a Web browser to access our web pages at www.derman.com (and, if you're reading this, you can), then you should also be able to connect to our licensing server — if you can't it's most likely that your network controls are preventing LicenseControl from communicating with the licensing server. If that's so, see the information, above, regarding manual licensing.
Note: a LicenseControl query can have multiple parameters that each are multiple kilobytes in length with a total URI maximum of 8,190 bytes. Browsers, proxy servers and network communications must pass the entire parameter collection. Licensing operations will fail if parameters are truncated or altered.
2011-09: We've seen a small percentage of cases where the manual licensing will fail on the final/longer URI (it'll appear to "hang") because the network is not passing the longer URI. We've only seen this with Macs and have seen that using a browser on a PC on the same network will work (i.e., just re-issue the the request that failed). The failure has not been OS-version or browser-kind related so the evidence points to some software issue on those systems and/or networks (e.g., some networking-altering software product, some errant packet inspecting router, some misconfigured and/or over-zealous and/or erroneous security server, etc.). 'Though we have no confirmation, SonicWALL products have been implicated as causing this issue – possibly upstream at the ISP.
2012-01: We've released LicenseControl 4.600 that works around the "longer URLs can get whacked" issue. If you're having problems, you can ask the supplier of the licensed product for a build that uses LicenseControl 4.600 or later.
Some organizations create a rule called "General Product Updates" to allow all traffic, for anonymous users — important that part, as Mac software, and many pieces of Windows software, do not send credentials — to specified URL Sets and Domain Sets.
You may need to create a new URL set for the product being licensed, and for http://www.derman.com/* and http://tss-geotrust-crl.thawte.com/* (or the applicable certificate URL authority)
Provided both these URLs are accessible for anonymous traffic, activation normally works.
More Detail
LicenseControl supports most proxy setups. LicenseControl uses the proxy setup defined for your web-browsing services. If a proxy server is configured, LicenseControl will use it and will prompt you for the username and password if one is required by the proxy server setup. However, there are proxy servers that are configured to use empty login credentials so, if you normally don't see any proxy login but using LicenseControl shows one, try not entering any login credentials and just press the button.
LicenseControl does not support a script/server-driven automatic proxy (.pac file) setup allowed by some configurations. In such configurations, you'll either need to configure the proxy setup manually before LicenseControl will be able to use it or you'll need to use the manual licensing capability.
Specifically, LicenseControl uses the curl library to connect to the licensing server. On an OS X system, you can easily test a curl-based connection via the command line. This may provide valuable troubleshooting information. To do so:
- bring up a Terminal window (launch /Applications/Utilities/Terminal)
-
if your network does not use a proxy server, issue the command:
curl -x www.derman.com:80 http://www.derman.com/ > ~/Desktop/foo.html -
if your network does use a proxy server, issue the command:
curl -U user:password -x proxy-server-address:proxy-server-port http://www.derman.com/ > ~/Desktop/foo.html
where user and password are the username and password required by your proxy server (if no proxy login is required, omit the "-U user:password" portion of the command) and proxy-server-address and proxy-server-port provide the fully qualified domain name (FQDN) or the IP address and port number for the proxy server
In either of the cases, above, if successful, the curl command will create a web page named foo.html on your desktop. If you open that web page, you'll see our home page, minus the graphics (i.e., drag the file icon for the foo.html file from your desktop onto a web-browser window).